Tells whether an authentication came from the person's own compliant registered device. Never throws.
a session, whose latest event names the device
true when it did
Tells whether an authentication came from the person's own compliant registered device. Never throws.